Blog on Maisie

Cover Illustration by atomic_arctic While doing matrixes on GPUs are kind of overplayed, they still represent one of the most important computation for modern AI workloads, making up the vast majority of FLOPS during both training and inference of deep le…

Cover Illustration by onigiriice There has been alot of copium about Deepseek-R1 leapfrogging ChatGPT-o1 in benchmarks, with many accusing Deepseek either lying about their capabilities or sanction-busting US export controls.

Cover Illustration by ochxzuke I was heading for a trip over the weekends where i would be far from my main workstation, and at this time i was looking to continue my current run of Persona 5 Royal on the PC.

Cover Illustration by buruberrii_ While we discussed previously about how endpoint-based DLP/EDR agents work in macOS, there is another component of endpoint security systems that are often overlooked and that is the browser extension component.

Cover Illustration by onigiriice ——————————————————————————————————————— The article contains partial content similar to Matteyeux’s article on the PCC VRE, for more observations about the firmware and its debuggability see the article here During the dev…

Cover Illustration by t0meku Traditionally, x86 processors lacked built-in virtualization support, leading to significant challenges when implementing efficient Virtual Machine Monitors (VMMs) or hypervisors.

Cover Illustration by atomic_arctic This research was done using software obtained by myself individually or through open-source projects abiding to all licenses.

Cover Illustration by ireneparamithaa DISCLAIMER : This research was done using software obtained by myself individually, analyzed using hardware owned by myself individually.

Cover Illustration by hi__dan In a recent trip from Japan, i came to score a rare PS3 reference tool (DECR-1000J) which was sold below market rates.

Cover Illustration by cloudnienty On March 29th, 2024, a critical backdoor (CVE-2024-3094) was discovered in the widely-used xz/liblzma package, a program for interacting with lzma-based compressed files.

Cover Illustration by cloudnienty This research was done using software obtained by myself individually, analyzed using hardware owned by myself individually.

Cover Illustration by ireneparamithaa For years there are two camps of perception in MacOS security, those who think that Macs are impenetrable boxes by design and sysadmins who are constantly horrified by the lack of protections that MacOS has despite be…

EDR (Endpoint Detection and Response) hooking is a well-known technique used in cybersecurity, and there are many examples available online of unhooking NTDLL (NT Dynamic Link Library), often using direct syscalls or mapping of NTDLL from disk or known dl…

If you’ve been reading closely to my recent blogposts, alot of them are about the exploitation of Windows machines.

Since security solution vendors began moving away from user-mode hooks to kernel-mode for API interception and logging, Microsoft Threat Intelligence Event Tracing for Windows (or ETW-TI) has been used to detect a variety of adversarial tactics.

In August 2022, TrendMicro reported on a ransomware that uses Genshin Impact’s Anti-Cheat drivers to bypass kernel-level privileges.

Kernel Patch Protection (KPP), also known as PatchGuard, is part of the NT kernel security system.